OpenAI Agents SDK JavaScript v0.18.0
OpenAI Agents SDK JavaScript v0.18.0 migrates Docker file APIs to execute directly inside containers, introduces configurable UnixLocal file protection, and adds an action option to the image generation tool.
Why this signal matters
OpenAI Agents SDK JavaScript v0.18.0 brings major sandbox enhancements and behavioral updates. Docker file APIs are migrated to execute entirely inside running containers, shifting requirements: container images must include /bin/sh and GNU utilities (such as realpath), operations now run under the container default user or explicit runAs, and new path grants need a session resume/recreation. Editor file updates are capped at 10 MiB (recommending execCommand for larger edits). UnixLocalSandboxClient introduces fileIOProtection ('auto' | 'required' | 'off') using Python-based file protection when available, though this does not confine host shell commands. Furthermore, imageGenerationTool now supports specifying the action ('generate', 'edit', or 'auto'), and fixes address deferred tool recovery during continuations, redundant screenshots, and sandbox workdir preservation.
Actionable summary
OpenAI Agents SDK JS v0.18.0 introduces potentially breaking sandbox changes: Docker file APIs now operate fully within containers requiring /bin/sh and GNU utilities (like realpath), with editor updates limited to 10 MiB. Added fileIOProtection config to UnixLocalSandboxClient and an action parameter ('generate' | 'edit' | 'auto') to imageGenerationTool().
- Agent usefulness
- 82/100
- Confidence
- 96%
- Canonical data
- JSON + Markdown
What builders should check
- Verify Docker container images include /bin/sh and GNU filesystem utilities (including realpath) to avoid breaking Docker file APIs.
- Ensure file size updates via the editor API do not exceed 10 MiB; migrate larger file edits to execCommand.
- Resume or recreate containers when adding new path grants before utilizing file APIs.
- Review UnixLocalSandboxClient configurations to set fileIOProtection to 'auto', 'required', or 'off' depending on your security and environment needs.